Offline FairPlay App Store IPA decryption with independent key derivation
Repository Index
47,133 repositories indexed
73–96 of 305 · Most stars
A collection of JavaScript engine CVEs with PoCs
- javascript
- cve
- vulnerability
Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.
- enterprise-software
- saml
- saml2
- saml-service-provider
Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
- crack
- zip
- multithread
- attack
XSS'OR - Hack with JavaScript.
- probe
- pentest-tool
- xss
- csrf
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
- incident-response
- malware-detection
- persistence
- powershell
pefile is a Python module to read and work with PE (Portable Executable) files
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
- malloc
- security
- memory-allocation
- malloc-library
A helm plugin that help manage secrets with Git workflow and store them anywhere
- helm
- helm-plugin
- helm-plugins
- kubernetes
Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
- wordlist
- wordlist-generator
- password
- cracking
A One Time Password Authentication package, compatible with Google Authenticator.
- php
- 2fa
- two-factor-authentication
- google2fa
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
The most complete open-source tool for Twitter intelligence analysis
Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.
Awesome Django authorization, without the database
- python
- django
- permissions
- rules
JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
- jwt
- htpasswd
- service
- golang
Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection
- ida-plugin
- taint-analysis
- reverse-engineering
- disassembly
Hashtopolis - distributed password cracking with Hashcat
- cracking
- distributed
- hashcat
- pentesting
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
- libtomcrypt
- cryptography
- c
- encryption
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
The best way to build Electron apps with security in mind.
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
Open source, self-hostable watched list for all your content (movies, tv series, anime, games) with user authentication, modern and clean UI and a very simple setup.